wordpress-jetpack-broken-access-control-vulnerable-application

wordpress-jetpack-broken-access-control-vulnerable-application This is a vulnerable application to test the exploit for the Jetpack 13.9.1 broken access control CVE-2024-9926. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a...

CVE-2018-20966

CVE-2018-20966: XSS in woocommerce-jetpack 3.8.0 Testbed for the above mentioned vulnerability...

CVE-2026-22356

CVE-2026-22356: Jetpack CRM Path Traversal Vulnerability and RCE Warning: This tool should only be used in authorized test environments. The user is solely responsible for illegal use. 📥 Requirements pip3 install requests urllib3 $ python3 exploit.py https://example.com --rce --cmd "id" + Target ...

Android-Security-Masterclass

Android Security Masterclass 🛡️📱 Official OWASP Project — A Hands-on OWASP MASVS/MASTG Security Training Lab for Android Developers & Pentesters — Mirror Architecture: Vulnerable ↔ Secure ↔ Attacker 📖 Overview The Android Security Masterclass is an official OWASP project designed with a Mirror...

CVE-2026-40808

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

CVE-2026-40808

The Jetpack VideoPress WordPress plugin (versions

CVE-2026-40808 WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

EUVD-2026-96542

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

CVE-2026-40808: Missing Authorization

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

CVE-2026-106602

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

CVE-2026-106601

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

CVE-2026-106602

The WordPress Jetpack plugin (versions

CVE-2026-106601 WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

CVE-2026-106602 WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

EUVD-2026-95743

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

EUVD-2026-95742

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

CVE-2026-106601

The Automattic Jetpack WordPress plugin, affecting versions

CVE-2026-106602: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

PT-2026-108887

Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2...

PT-2026-108888

Name of the Vulnerable Software and Affected Versions Jetpack versions prior to 16.3 Description An authentication bypass issue exists that allows for password recovery exploitation by using an alternate path or channel. Recommendations Update to a version newer than 16.2...